$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa File: 8245406e-c9af-32c4-8bfe-07765def09b9.roa (raw, json) Hash identifier: 0CTP/Zvw0fpCIwsdF1zxh5a2cn2L5UFQLV/d//ufcIE= Subject key identifier: A8:A2:10:B3:0A:CF:EC:89:69:F4:0E:C6:B4:EB:31:6E:E6:DD:A5:ED Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B736A43FBF599E37E25640 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa Signing time: Thu 24 Apr 2025 11:08:07 +0000 ROA not before: Thu 24 Apr 2025 11:08:07 +0000 ROA not after: Wed 23 Jul 2025 11:08:07 +0000 asID: 12041 IP address blocks: 65.22.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:36:a4:3f:bf:59:9e:37:e2:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:08:07 2025 GMT Not After : Jul 23 11:08:07 2025 GMT Subject: CN=0190ed6e-0f9e-45fc-89be-82e766efb09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:10:25:fb:e2:3c:2a:8d:f8:a8:5b:ee:b3: 9d:12:5a:ba:08:78:1d:ce:68:ca:55:58:3a:54:67: 98:97:24:c9:33:53:ee:eb:ce:c9:8a:ba:10:a8:39: f1:2c:83:ac:66:2b:51:48:ab:0e:31:59:2c:c3:f0: 8b:c0:96:ea:42:9f:0e:98:bd:85:0c:92:68:2f:65: d8:9c:4e:e8:8f:86:3e:82:6e:2f:5d:d3:df:3a:3b: 0e:51:51:29:ae:75:a3:66:8e:87:c2:be:f0:05:19: 90:12:e5:55:81:4c:9e:bc:da:8b:31:1c:a3:aa:66: 60:8c:b1:8e:72:9e:64:ec:1c:f7:ba:71:bd:9a:f3: f9:5e:9b:da:c8:fe:74:90:de:dc:74:ff:16:ce:35: 9e:09:a7:bf:89:82:dd:91:35:b2:e2:49:29:b0:1f: 87:bd:d8:d5:0f:2c:a1:98:25:1b:da:ff:e3:a4:dc: 6c:bc:8f:c0:6b:3c:c5:73:fc:80:dd:7e:b9:98:4b: e9:fc:ce:3b:b2:08:8f:95:f5:12:b0:17:b5:eb:01: 5a:e3:fd:aa:b9:cc:de:9a:51:fe:ca:5d:7c:6c:a8: 65:e6:11:c3:ab:5f:95:50:a6:ed:cb:1c:ef:74:0a: ce:7b:62:0c:c0:f6:6a:59:e6:b4:a9:4c:1b:a6:fd: 8a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A2:10:B3:0A:CF:EC:89:69:F4:0E:C6:B4:EB:31:6E:E6:DD:A5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8245406e-c9af-32c4-8bfe-07765def09b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e5:6e:46:c3:8d:19:63:de:c8:60:12:23:ac:7f:03:99:db: 21:12:94:21:4d:7b:be:4e:f8:fa:1e:fd:9b:08:30:99:6d:98: 08:38:83:f3:85:34:4c:fe:2a:97:1c:ad:b4:25:91:0c:f5:ac: f1:29:3a:ae:80:9a:07:b3:7b:a4:bb:cf:b3:2b:00:e0:79:b1: e0:0e:7c:f0:31:86:c0:ad:78:11:72:1f:4f:86:d3:9b:80:4b: 9d:cb:21:a5:38:15:54:e4:e2:10:0a:25:54:61:d4:f5:cf:0e: d4:b0:7d:ff:93:7d:c0:83:9f:f3:78:75:c2:2e:4b:2d:1a:73: 8d:4d:95:28:e7:9e:1e:af:0e:2a:18:04:b1:ec:a2:cb:13:61: 7e:a3:4e:66:cc:cf:25:f8:e3:71:69:e2:8e:d6:9c:eb:16:4d: b5:99:4b:d2:8a:77:c1:34:93:4c:1d:83:60:66:ef:91:38:80: 82:e3:ed:2b:29:22:87:88:12:66:6a:6b:5c:1e:5a:26:69:73: 28:a7:ec:36:aa:e7:c0:ce:4a:e6:05:d6:83:58:18:70:a6:d5: 49:dc:79:0c:d6:0f:e4:d5:4b:d2:7e:2b:b6:c7:c3:07:62:ad: 77:a0:13:5c:68:3c:bb:97:88:fb:63:da:74:4c:92:09:02:e3: 87:a8:c9:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhtzakP79ZnjfiVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDgwN1oXDTI1MDcyMzExMDgwN1owLzEtMCsGA1UEAxMk MDE5MGVkNmUtMGY5ZS00NWZjLTg5YmUtODJlNzY2ZWZiMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvsQJfviPCqN+Khb7rOdElq6CHgdzmjKVVg6 VGeYlyTJM1Pu687JiroQqDnxLIOsZitRSKsOMVksw/CLwJbqQp8OmL2FDJJoL2XY nE7oj4Y+gm4vXdPfOjsOUVEprnWjZo6Hwr7wBRmQEuVVgUyevNqLMRyjqmZgjLGO cp5k7Bz3unG9mvP5XpvayP50kN7cdP8WzjWeCae/iYLdkTWy4kkpsB+HvdjVDyyh mCUb2v/jpNxsvI/AazzFc/yA3X65mEvp/M47sgiPlfUSsBe16wFa4/2quczemlH+ yl18bKhl5hHDq1+VUKbtyxzvdArOe2IMwPZqWea0qUwbpv2KUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiiELMKz+yJafQOxrTrMW7m3aXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvODI0NTQwNmUtYzlhZi0z MmM0LThiZmUtMDc3NjVkZWYwOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRY5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPlbkbDjRlj3shgEiOsfwOZ2yESlCFNe75O+Poe/ZsIMJltmAg4g/OF NEz+KpccrbQlkQz1rPEpOq6Amgeze6S7z7MrAOB5seAOfPAxhsCteBFyH0+G05uA S53LIaU4FVTk4hAKJVRh1PXPDtSwff+TfcCDn/N4dcIuSy0ac41NlSjnnh6vDioY BLHsossTYX6jTmbMzyX443Fp4o7WnOsWTbWZS9KKd8E0k0wdg2Bm75E4gILj7Ssp IoeIEmZqa1weWiZpcyin7Daq58DOSuYF1oNYGHCm1UnceQzWD+TVS9J+K7bHwwdi rXegE1xoPLuXiPtj2nRMkgkC44eoyQI= -----END CERTIFICATE-----Generated at Tue Apr 29 13:08:32 2025 by rpki-client